Thanks for all your responses! Yes, the GSS proxy is not available on RHEL-6. For the time being, we can live with krb5_renewable_lifetime = 365d.

For my own curiosity, what kind of debugging tips or recommendations included in BZ -, which I can't access with regular Redhat Bugzilla account?

Thanks a lot,


From: Rob Crittenden <rcritten redhat com>
To: dpal redhat com, freeipa-users redhat com
Subject: Re: [Freeipa-users] weird behavior on centos 6
Date: Thu, 15 May 2014 09:46:28 -0400

Dmitri Pal wrote:

    On 05/14/2014 06:12 PM, Carl E. Ma wrote:


Recently I realized our centos 6 freeipa clients hangs randomly. With some research, the issue is related to autofs bug, which was mentioned
        year ago - Automount fails for IPA user when kerberos ticket is
        expired, ssh hangs (
        This ticket was closed with comment - "closed defect: invalid".

My workaround is extending ticket_lifetime to 24h and renew_lifetime to 365d. I wonder whether there is better solution or some insights of
        this bug.



    Read about GSS proxy.

I don't believe gss-proxy is available for RHEL-6 and backporting is unlikely.

The ticket is closed but the associated BZ is still open, and has some debugging tips and other recommendations.


Freeipa-users mailing list

Reply via email to